Both Mozilla ?nd Google d??? n?t sing th? praises ?f WebGL ?nd ?t? ability t? rich 3D familiarity f?r users through th? Internet. According t? researcher James Forshaw, ?n additional dimension th?t h?? a attractive serious trade-offs:. Security Over Background Data blog detailing Forshaw WebGL distinct flaws th?t ???ld allow ?n attacker t? infiltrate a user?s system ?nd wreak havoc f?r th? GPU ?nd video card drivers. Th??? issues ?r? particularly worrying ??n?? WebGL ?? really granted access t? functions ?n kernel mode, ??n wh?t w?ll b? th? m??t protected ??rt ?f ???r machine.? In addition t? being ?bl? t? constitute th? system unusable(WebGL already known t? h??? b??n used ?n denial-?f-supply attacks), th? gaps allow something th?t ?? potentially much more damaging . A? shown ?n th? proof ?f contextual ???r???h , ??? ??n steal th? content ?? being rendered t? th? user ?n th? exhibit. Th?? method th?t ??? ?r? viewing confidential data ? fr?m bank account number f?r q???t??n? ?nd ?n?w?r? t? reset ???r password. ? Th?? m?? b? exposed t? harmful prying proof-?f-concept ?h??ld employment ?n ?n? browser-enabled WebGL, including 4 + Firefox ?nd Google Chrome 9 +. Internet Explorer ?nd Opera users ?r? safe f?r immediately, although support ?? ?l?tt?d WebGL final version ?f Opera 11.50. Microsoft, h?w???r, h?? m?d? ?t clear th?t ?h? preferred t? support technologies such ?? CSS, HTML5 3D layers. ? And ?t seems th?t users ??n ?m?l?? IE a small extra peace ?f intellect ?? a result ?f th?? ?h???? Forshaw recommends th?t administrators(?nd users) t? turn ?ff WebGL security weaknesses h??? b??n removed. It w?ll n?t b? ?n simple task, cautions, ?nd ?t? closing words, ?r? really very ??r?l??? ?. Perhaps th? best solution w??ld b? t? develop a specification f?r 3D graphics fr?m scratch th??? problems ?n intellect? b? Th? Inquirer ?nd context IS
Tags: | Bled | mast |
south korea draft grades cesar millan los angeles power rangers samurai
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.